Title: Mass Change Of Ssop
Description: Mass Change of SSOP
cubitt - March 27, 2008 02:43 PM (GMT)
We just recently installed/migrated to LSF9. We are maintaining the laua security for now. When they migrated our users over from 8.0.3 we had one login for multiple users for our employee self service users (eself) and our req self service (requser) users. The problem is that when they seperated these users and did the loadusers all passwords were set to password.
Is there a way to mass load unique passwords for these users?
We are still using the 8.1 apps.
UNIX 5.3
Oracle 10
Websphere/Tivoli
:lala:
schroncd - March 27, 2008 04:23 PM (GMT)
The time to have done that was when you were mass-loading those users initially... At this point your best bet is to:
A. Tell each of the users to login and immediately change their password - starting first with those who handle delicate information.
-or-
B. Bind the ldap to your corporate ID system, like AD
g'luck!
3monkeys - March 27, 2008 06:26 PM (GMT)
Dave:
That migration was our first test migration. Is there an opportunity to get the passwords changed when we do our production migration? Or for now, is there a way to update the password somewhere in the DB2 table(s) that retain it - or is it encrypted?
-GW
dgreen - March 28, 2008 01:32 PM (GMT)
We had the same issue. I wrote a crystal report against the WEBUSER nad EMPLOYEE tables (in 803) linking on EMPLOYEE & COMPANY and grabbed the webuser (login ID) and the FICA-NBR.
I then exported it to excel, took out the "-" from the SSN and created a CSV file of userid and SSN (minus the dashes). I ran the ssoconfig -c (option 5) and exported the SSOP identies to see what values were populating the xml file. Specifically the RDID field (turned out in our case to be the userid).
I wrote a small perl script to convert the csv file to an XML file formatted for ssoconfig to import.
Now everyone's password is their SSN (minus the dashes).
Here is the code: Disclaimer - It worked for me, YMMV. Look at the output BEFORE running the ssoconfig -l passwd /file/to/import/ssop.xml to make sure it looks good.
| CODE |
#!/usr/bin/perl
########################################################################
#
# script to convert a csv file of user id's and unencrypted passwords
# to Lawson's ssoconfig load template
#
# By David Green 3/08
#
########################################################################
print "What is the filepathname of the csv file to format?\n";
$INFILE = <STDIN>;
chomp $INFILE;
#change to filepathname for your system
$OUTFILE = "/path/to/output/file/to/load/ssop.xml";
open(XML, ">$OUTFILE") || die "Can't open $OUTFILE file: $!\n";
print XML qq(<?xml version="1.0" encoding="ISO-8859-1"?>\n);
print XML qq(<BATCH_LOAD OVERRIDE="true">\n);
open(CSV, "<$INFILE") || die "Can't open file $INFILE: $!\n";
while(<CSV>) {
chomp;
$ID = (split /,/, $_)[0];
$PASS = (split /,/, $_)[1];
print XML qq(\t<IDENTITY SERVICENAME="SSOP">\n\t\t<RDID><![CDATA[$ID]]></RDID>\n\t\t<USER><![CDATA[$ID]]></USER>\n\t\t<PASSWORD><![CDATA[$PASS]]></PASSWORD>\n\t</IDENTITY>\n);
}
print XML qq(</BATCH_LOAD>);
close CSV;
close XML;
|
cheers,
david
cubitt - April 2, 2008 12:21 PM (GMT)
David,
Thank you. I think you may have saved me hours if not days of manual entry.
Colleen